metasploit | fdb5fe2174e18d9367a64b2192dd8b43a988bcf7e5d18b6b661be0d0613d13fe | Triage

Sharing

General

Target

fdb5fe2174e18d9367a64b2192dd8b43a988bcf7e5d18b6b661be0d0613d13fe
Size

14KB
Sample

240924-z51s6aygrg
MD5

9a891237aff0c8155023f2bbdffcb98d
SHA1

f51ec1479da9c5ef4e8f25e482871432528f2b7c
SHA256

fdb5fe2174e18d9367a64b2192dd8b43a988bcf7e5d18b6b661be0d0613d13fe
SHA512

ea6ea652ee97e91e4558c4755ad0a779de6ae7fcb8b2fe3a7f10677181b4950e60423687042e85ccde5c926db6ec0c450b8cd1f1a483818b77012f5d89b38e37
SSDEEP

192:o3mbPYCfMcrfOIuZmvKQxtzlSIVX6NOOa1ZvYzYCejDMN1:HMCfrfQ6tBSIca1ZvYzVeUN1

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.173.128:80/9w8t

Attributes

headers User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; BOIE9;ENUS)

Targets

- Target
  
  fdb5fe2174e18d9367a64b2192dd8b43a988bcf7e5d18b6b661be0d0613d13fe
- Size
  
  14KB
- MD5
  
  9a891237aff0c8155023f2bbdffcb98d
- SHA1
  
  f51ec1479da9c5ef4e8f25e482871432528f2b7c
- SHA256
  
  fdb5fe2174e18d9367a64b2192dd8b43a988bcf7e5d18b6b661be0d0613d13fe
- SHA512
  
  ea6ea652ee97e91e4558c4755ad0a779de6ae7fcb8b2fe3a7f10677181b4950e60423687042e85ccde5c926db6ec0c450b8cd1f1a483818b77012f5d89b38e37
- SSDEEP
  
  192:o3mbPYCfMcrfOIuZmvKQxtzlSIVX6NOOa1ZvYzYCejDMN1:HMCfrfQ6tBSIca1ZvYzVeUN1
Score

10^/10

metasploit backdoor discovery trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoordiscoverytrojan

behavioral2

metasploitbackdoordiscoverytrojan